Subprograms for Administrator Services

These subprograms can be used to perform various Administrator Services functions:

Subprogram	Description
`NSCADM`	Display General Options; process (ETID-related) logon records; process logon/countersign error records; remove/re-establish maintenance/retrieval sections for individual object types; display users in whose security profiles a value differs from a preset value; list and unlock locked user IDs.
`NSCSSXMN`	Archive/revive LDAP security profile.
`NSCXLI`	Display a single maintenance log record.
`NSCXLO`	Display list of maintenance log records.

NSCADM

The subprogram NSCADM is used to:

display the settings of General Options in Administrator Services;
process logon records, which is particular relevant for ETID-related logon records;
process logon/countersign error records;
remove/re-establish Natural Security maintenance/retrieval sections for: base/compound application profiles and RPC server profiles;
compare a preset value (as set in the User Preset Values) with the corresponding actual value in user security profiles to obtain a list of all user security profiles in which the value differs from the preset value;
list locked user IDs, and unlock a user ID.

NSCADM is invoked as follows:

CALLNAT 'NSCADM' PVERSION PPARM PPARM1(*) PLENGTH PRC PNSC-MESSAGE

Example programs PGMADM01 - PGMADM07 are provided in source form in the library SYSSEC. Further descriptions of CALLNAT parameters are included.

Example Program	Description	Code
`PGMADM01`	Return general default and options.	`GDO`, `NSF` (only z/OS), `SSX` (only Linux and Windows)
`PGMADM02`	List and delete logon records.	`LR`, `DR`
`PGMADM03`	Process Natural Security object type descriptions (delete description of Application entity, display description of Application entity, update description of Natural RPC entity).	`DI`, `DE`, `UP`
`PGMADM04`	Obtain a list of Natural Security user profiles in which the value of a field differs from the corresponding preset value.	`PR`
`PGMADM05`	Maintain time-stamp related ETID logon records. (It is possible to select those logons which occurred in a Natural RPC environment).	`LR`
`PGMADM06`	List and unlock user IDs.	`AE`
`PGMADM07`	List and delete logon/countersign error records.	`LE`, `DE`

The parameter PPARM is used as a function code:

Code	Function
`GDO`	Display general options.
`NSF`	Display NSF options.
`LR`	List logon records.
`DR`	Delete logon records.
`LE`	List logon error/countersign error.
`DE`	Delete logon error/countersign error.
`DI`	Display maintenance/retrieval sections for base/compound application and RPC server profiles.
`DE`	Delete maintenance/retrieval sections for base/compound application and RPC server profiles.
`PR`	Compare preset-value.
`LI`	List locked user IDs.
`UL`	Unlock a user ID.

NSCSSXMN

The subprogram NSCSSXMN is only available on Windows and Linux. It is used to archive and revive an LDAP security profile.

A prerequisite for the use of this subprogram is that the LDAP security profile exists in archived or revived form; see Authentication Options (LDAP).

NSCSSXMN is invoked as follows:

CALLNAT 'NSCSSXMN' PFUNCTION PPROFILE-ID PRC

An example program PGMSSX02 of how to invoke this subprogram is provided in source form in the library SYSSEC. It includes descriptions of the individual CALLNAT parameters.

Example Program	Description	Code
`PGMSSX02`	Maintain authentication profiles (LDAP).	`AR`, `RV`

The parameter PFUNCTION is used as a function code:

Code	Function
`AR`	Archive security profile.
`RV`	Revive security profile.

NSCXLI

The subprogram NSCXLI is used to display a single maintenance log record, created by Natural Security if the general option Logging of Maintenance Functions is active.

NSCXLI is invoked as follows:

CALLNAT 'NSCXLI' PFUNCTION PSELECT-TYPE POBJ-ID POBJ-ID2 PTIMESTMP PPARM PRC PNSC-MESSAGE PLOG-HEADER XPARM1 PPARM1 XPARM2 PPARM2 XPARM3 PPARM3 XPARM4 PPARM4 XPARM5 PPARM5 XPARM6 PPARM6 XTEXT PTEXT

Example programs PGMXLI01 - PGMXLI10 of how to invoke this subprogram are provided in source form in the library SYSSEC. They include descriptions of the individual CALLNAT parameters.

Example Program	Description	Code
`PGMXLI01`	Read the maintenance log record of a file.	`RI`
`PGMXLI02`	Read the maintenance log record of a file. Display only the modified data of this record.	`RI`
`PGMXLI03`	Read the maintenance log record of a library.	`RI`
`PGMXLI04`	Read the maintenance log record of a library. Display only the modified data of this record.	`RI`
`PGMXLI05`	Read the maintenance log record of a mailbox.	`RI`
`PGMXLI06`	Read the maintenance log record of a mailbox. Display only the modified data of this record.	`RI`
`PGMXLI07`	Read the maintenance log record of a user.	`RI`
`PGMXLI08`	Read the maintenance log record of a user. Display only the modified data of this record.	`RI`
`PGMXLI09`	Read the maintenance log record of an external object.	`RI`
`PGMXLI10`	Read the maintenance log record of an external object.	`RI`

Code	Function
`RI`	Read one record.

NSCXLO

The subprogram NSCXLO is used to read maintenance log records, which are created by Natural Security if the general option Logging of Maintenance Functions is active.

NSCXLO is invoked as follows:

CALLNAT 'NSCXLO' PFUNCTION PSELECT-TYPE PSTART-OBJ-ID PFROMTIMESTMP PTOTIMESTMP PRC PPARM PPARM1(*) PNSC-MESSAGE

An example program PGMXLO01 of how to invoke this subprogram is provided in source form in the library SYSSEC. It includes descriptions of the individual CALLNAT parameters.

Example Program	Description	Code
`PGMXLO01`	Retrieve security profile maintenance logs.	`RI`

Code	Function
`RI`	Read one record.